Skip to content

TAN-2026-032

Tanium addressed an information disclosure vulnerability in Comply.

Severity: Medium

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact

This vulnerability could allow an authenticated Tanium user with the comply report write permission to gain read-only access to data they should not have access to.

Products Affected

2026H1 Release:

  • Comply prior to Update 7 (v2.37.308)

Available Updates

2026H1 Release:

  • Update 7 (Comply v2.37.308) and later

Workaround and Mitigations

None.

Acknowledgements

None.